Here's what they said:

Like many of you, we were surprised by the news last week, and questions quickly followed about our position on this matter. We just have to wait to see how this will develop for FOSS and Linux in general. It isn’t easy for us to make a clear statement on it at this moment, because this decision involves not only the distros but also DE/WM environments, software packages and mirror networks. Like Arch, we don’t have any infrastructure to track how many users download or install our system, let alone who is running Endeavour on their machines. Besides the fact that it goes against FOSS fundamentals, we simply don’t have the manpower or resources to take on this near-impossible task.

Also, in creating this law, not a single person or entity from the FOSS world was represented or heard, and there is still a window of opportunity open to address the concerns for open source software and Linux/Freebsd systems before the law takes effect. After the news dropped, the OSI, FSF, and Linux Foundation must have realised their mistake in not reacting in time and hopefully will come into action for the many distributions and other FOSS projects, like us, that don’t have Californian or US legal representation. So, all eyes are on them, because Colorado and the rest of the world are next… We are not blaming any of the organisations mentioned by the way. We are just pointing out that the law isn’t set in stone, yet.